Google Introduces AI-Powered Ransomware Detection in Drive for Desktop

Ransomware continues to be a growing cyber threat, capable of crippling businesses and disrupting personal lives. Losing access to vital files — from cherished family photos to financial records — can have devastating consequences. To tackle this, Google is introducing an AI-powered ransomware detection system for Drive for Desktop, designed to identify threats early and prevent large-scale data loss.

According to Google’s blog post, this new security layer for macOS and Windows continuously monitors for abnormal behavior, such as mass file encryption or corruption — common indicators of a ransomware attack. Unlike traditional antivirus tools that scan for malicious code, Google’s AI model focuses on how files change. When it detects unusual activity, even across a few files, it immediately halts syncing between the user’s device and the cloud. This pause prevents infected files from overwriting safe versions in Google Drive.

Once potential ransomware activity is detected, users receive desktop and email alerts and can access a new recovery interface within Drive. This interface allows them to restore their files to a clean, pre-attack state.

Ransomware remains a significant cybersecurity issue. In 2024, Mandiant reported that ransomware accounted for 21% of all intrusions, with an average cost per incident exceeding $5 million.

[…]
Content was cut in order to protect the source.Please visit the source for the rest of the article.